Alerts This Week
Warning Icon 1 659
Alerts This Week
Warning Icon 1 659

Slackware 12.0 - 13.0: 2010-024-03 High: Pidgin Directory Issue

slackware
Calendar Grey January 25, 2010
Dist Slackware Esm H88
Latest Pidgin updates for Slackware address a critical path traversal vulnerability. Perform the upgrade immediately for improved safety!
New pidgin packages are available for Slackware 12.0, 12.1, 12.2, 13.0, and -current to fix a security issue

Summary

Here are the details from the Slackware 13.0 ChangeLog: patches/packages/pidgin-2.6.5-i486-1_slack13.0.txz : Upgraded. This fixes a directory traversal vulnerability in Pidgin's MSN protocol handling that may allow attackers to download arbitrary files. For more information, see: https://www.cve.org/CVERecord?id=CVE-2010-0013 (* Security fix *)

Where Find New Packages

HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading directly from ftp.slackware.com.
Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating additional FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 12.0:
Updated package for Slackware 12.1:
Updated package for Slackware 12.2:
Updated package for Slackware 13.0:
Updated package for Slackware x86_64 13.0:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:

MD5 Signatures

Slackware 12.0 package: 1d779642ef1728ee115d0159803ffce7 pidgin-2.6.5-i486-1_slack12.0.tgz
Slackware 12.1 package: 24e6a95472e15299f16ad137ca92c568 pidgin-2.6.5-i486-1_slack12.1.tgz
Slackware 12.2 package: d5186bf297d9647f08e4ff8b8d3496e5 pidgin-2.6.5-i486-1_slack12.2.tgz
Slackware 13.0 package: b73f234503067324f5a16bc1686d0192 pidgin-2.6.5-i486-1_slack13.0.txz
Slackware x86_64 13.0 package: 6ae919fbbfc06731d4b83a9ff65f88a8 pidgin-2.6.5-x86_64-1_slack13.0.txz
Slackware -current package: da2ea9b466c31521cf3857fc6998cb4c pidgin-2.6.5-i486-1.txz
Slackware x86_64 -current package: 362a93381a225db704749b4249013731 pidgin-2.6.5-x86_64-1.txz

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg pidgin-2.6.5-i486-1_slack13.0.txz

Related News

Your message here